Age | Commit message (Collapse) | Author |
|
|
|
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other
1.1.15 and earlier versions, allow remote attackers to execute
arbitrary code via vectors related to (1) a crafted EBML element
length processed by the parse_block_group function in
demux_matroska.c; (2) a certain combination of sps, w, and h values
processed by the real_parse_audio_specific_data and
demux_real_send_chunk functions in demux_real.c; and (3) an
unspecified combination of three values processed by the open_ra_file
function in demux_realaudio.c. NOTE: vector 2 reportedly exists
because of an incomplete fix in 1.1.15.
|
|
|
|
Also try to simplify frame buffer allocation.
--HG--
extra : transplant_source : %B6%B5o%A8%24%E1%F5B%D2%D8%08%F8%DE%E7%9E%B6%B8C%A4j
|
|
Also don't reset memory after it's allocated if we do that with
calloc.
|
|
The xine_xmalloc() function is going to be deprecated, as its
behaviour is rarely needed as such, and it's thus misused.
With this, almost all uses of xine_xmalloc() with static size (for
instance the value returned by sizeof()) or with a size that is
guaranteed not to be zero (like strlen()+1) are replaced with calls to
either calloc(1, ...) or malloc().
malloc() is used whenever the allocated memory is going to be
immediately overwritten, while calloc() is used in every other case,
as it sets the whole memory area to zero.
--HG--
extra : transplant_source : %8F%98%EC%02%1E%83%F0s%06X%83C%205Y%80%B12%CC%E1
|
|
|
|
|
|
This patch drops support for RV20.
|
|
|
|
--HG--
extra : transplant_source : %E0%D0%C5%8B%BEU%DD%24%5D7%1F%ADV%AD%EB%23%CBU%80%EB
|
|
For contributed code, leave whatever the version we last synced for is using
to make simpler future syncs.
|
|
Solaris definitions.
|
|
make seek_flag a 1-bit field. This reduces as much as possible the padding. Note that block_align should remain on the same cacheline as the fifo pointers, as it's used at every chunk, while the rest of the fields are used only when seeking.
CVS patchset: 8760
CVS date: 2007/03/29 17:00:32
|
|
constant string, and make the extensions and mrl vaiables usually declared when testing extension demux strategy constants too.
CVS patchset: 8523
CVS date: 2007/01/19 00:26:39
|
|
http://article.gmane.org/gmane.comp.video.xine.devel/9532
it is now up to demuxers to decide what the 0..65535 position means.
demuxers tested: ogg, voc, flac, rm, asf, vqa, vob, avi, y4m, au, mov, ts, mp3, mpg, wav, ra, mve
CVS patchset: 6686
CVS date: 2004/06/13 21:28:52
|
|
CVS patchset: 6260
CVS date: 2004/03/14 22:10:15
|
|
CVS patchset: 6259
CVS date: 2004/03/14 21:37:52
|
|
- increase demux and decoder apis
- fix runtime changing of ogg/ogm audio channels
note: i hope i haven't broken any demux->decoder data exchange. please report any problems.
CVS patchset: 6014
CVS date: 2004/01/09 01:26:32
|
|
relevant too. Small other little fix (can't remember). Change few internal function prototype because it xine_t pointer need to be used if some xine's internal sections. NOTE: libdvd{nav,read} is still too noisy, i will take a look to made it quit, without invasive changes. To be continued...
CVS patchset: 5844
CVS date: 2003/12/05 15:54:56
|
|
BIG NOTE: use helpers to access to these informations (get/set/reset):
_x_{stream,meta}_info_{get,set,reset}()
are for internal use, don't use *_public() ones from inside the beast ;-)
Some wrongly names "xine_" fonction renaming.
CVS patchset: 5757
CVS date: 2003/11/16 23:33:42
|
|
- demuxers should not access stream->demux_thread_running
- remove deprecated get_video_frame/got_video_frame_cb
CVS patchset: 5732
CVS date: 2003/11/15 14:00:35
|
|
CVS patchset: 5721
CVS date: 2003/11/11 18:44:50
|
|
CVS patchset: 5657
CVS date: 2003/10/31 22:56:21
|
|
1) Add support for RealAudio 1.0 files using 14.4 codec
2) Read meta info
CVS patchset: 5629
CVS date: 2003/10/28 20:12:54
|
|
fft*post are untouched (fft: for now).
CVS patchset: 5310
CVS date: 2003/08/25 21:51:37
|
|
CVS patchset: 5167
CVS date: 2003/07/16 00:52:45
|
|
CVS patchset: 4784
CVS date: 2003/05/06 20:19:56
|
|
CVS patchset: 4632
CVS date: 2003/04/17 19:01:23
|
|
CVS patchset: 4525
CVS date: 2003/03/31 19:31:54
|
|
CVS patchset: 4357
CVS date: 2003/03/07 12:51:47
|
|
- disable debug messages in flac decoder
- review demuxer mimetypes
- use fourcc internal functions in demux_real
CVS patchset: 3995
CVS date: 2003/01/23 16:11:56
|
|
facilities
CVS patchset: 3974
CVS date: 2003/01/19 23:33:33
|
|
CVS patchset: 3943
CVS date: 2003/01/17 16:52:33
|
|
CVS patchset: 3942
CVS date: 2003/01/17 16:25:49
|
|
fix some intermediate calculation
CVS patchset: 3856
CVS date: 2003/01/10 21:10:50
|
|
CVS patchset: 3851
CVS date: 2003/01/10 11:57:15
|
|
for more information see message on xine-devel
CVS patchset: 3818
CVS date: 2003/01/08 01:02:27
|
|
same shared library (reduce loading time). demuxer api increased so
old ungrouped plugins won't be loaded.
Bill Fink patch to enable playback of live rawdv streams.
obs: non-regular files are now supposed non-seekable.
CVS patchset: 3771
CVS date: 2003/01/04 14:48:11
|
|
different sizeof than integer.
- add extra_info structure to pass informations from input/demuxers down
to the output frame. this can be used, for example, to pass the frame
number of a frame (when known by decoder). also, immediate benefict is
that we now have a slider which really shows the current position of
the playing stream. new fields can be added to extra_info keeping
binary compatibility
- bumpy everybody's api versions
CVS patchset: 3603
CVS date: 2002/12/21 12:56:44
|
|
i want to make sure we have a 1:1 mapping of sending and waiting for BUF_CONTROL_HEADERS_DONE.)
- bring asf demuxer into a saner state when seeking. that fixes the problem
of wrong audio pts and hanging audio_out on huge sleeps (at least for asf).
CVS patchset: 3465
CVS date: 2002/12/08 21:43:50
|
|
get_optional_data(). Bumped API version to 18. Added calls to these methods in xine_get_{spu,audio}_lang(). Added DVBSUB support in demux_ts.c
CVS patchset: 3386
CVS date: 2002/11/28 10:21:05
|
|
* new public output interface xine_{audio,video}_port_t instead of
xine_{ao,vo}_driver_t, old names kept as aliases for compatibility
* modified the engine to allow multiple streams per output
* renaming of some internal structures according to public changes
* moving SCR out of per-stream-metronom into a global metronom_clock_t
residing in xine_t and therefore easily available to the output layer
* adapting all available plugins
(note to external projects: the compiler will help you a lot, if a plugin
compiles, it is adapted, because all changes add new parameters to some
functions)
* bump up all interface versions because of xine_t and xine_stream_t changes
CVS patchset: 3312
CVS date: 2002/11/20 11:57:38
|
|
CVS patchset: 3215
CVS date: 2002/11/09 23:22:32
|
|
CVS patchset: 3126
CVS date: 2002/11/01 17:41:02
|
|
- time to cleanup demuxer mess... no more pthread stuff on any demuxer.
of course i haven't tested all demuxers, but they at least compile.
(sorry Mike, we will need to move a few variables around to make most of
your demuxers work again - not big deal i think)
- make api more consistent by providing xine_open/xine_close
and xine_start/xine_stop.
CVS patchset: 3058
CVS date: 2002/10/28 03:24:42
|
|
CVS patchset: 3045
CVS date: 2002/10/27 18:00:29
|